Data confidentiality & security

Confidential information. Controlled access.

Understand who can access your information, how it may be used and what to confirm before an engagement.

Operating policy updated October 8, 2026.

Who can access your information?

Private BRENO engagements require sign-in and separate access approval. Client access is limited to authorized engagements. Authorized Negotiate Power operators also have access to deliver and administer the service. Necessary hosting, identity, storage and other service providers process information within their applicable roles. This is controlled access, not a promise that only the client can access the information.

What may Negotiate Power do with confidential information?

Our operating policy permits use only for your authorized engagement and necessary service operations. It prohibits selling confidential client decision information, exploiting confidential business opportunities for our own competitive or investment advantage, and disclosing confidential information to unrelated clients. Reusing client-specific confidential information to benefit another engagement requires express written client authorization. Removing names or de-identifying information does not, by itself, authorize unrelated commercial reuse.

How is client work kept separate?

The Private Decision Room checks both approved access and the engagement associated with a requested resource. Evidence storage is private, and report access and release follow governed controls. Authorized operator and administrative access remains possible. These controls do not make a system immune to every security risk.

How do service providers and AI fit?

BRENO uses service providers for necessary operations such as hosting, authentication, storage and communications. Providers do not all receive the same information. Our policy requires an approved processing purpose and documented handling arrangements before confidential material is used with an external AI service. Provider products, settings, retention and training terms differ; we do not make a blanket claim that every provider retains nothing or never uses information for model improvement. Ask us to confirm the arrangements applicable to your engagement before sharing material subject to special restrictions.

How long is information retained?

We apply a retention and disposition policy that distinguishes confidential source material from final decision assets and necessary governance records. The applicable engagement terms, legal holds, correction obligations and explicit client authorization can affect disposition. Deletion must account for working copies, derived records and provider-managed backups. We do not promise immediate erasure from every system or an unconditional deletion deadline. Ask us to confirm the schedule, exceptions and known provider limitations for your engagement.

Whose information and deliverables are they?

Providing information for an engagement is not permission for unrelated commercial reuse. Your engagement agreement governs rights in supplied information and final deliverables. Negotiate Power’s pre-existing software, methods and other background intellectual property are distinct from client-supplied information. Confirm the applicable rights in the written engagement terms; this page does not replace them.

What is different about Explore BRENO?

Public Explore BRENO uses synthetic organizations and illustrative information. It is not a portal for submitting client information. Real client engagements use an authenticated, client-specific Private Decision Room and the applicable engagement terms.

Questions, export or deletion requests

Contact contact@negotiatepower.com to clarify handling requirements or request an export or deletion review. We verify authority and scope and consider applicable contractual, legal, security and operational requirements before acting. Do not put sensitive records in an initial email. Privacy rights and website data handling are also addressed in our Privacy Policy.

This page explains current operating policy and access controls. Your signed engagement agreement and applicable law govern contractual rights and obligations. It is not a security certification or a claim of absolute security.